3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +188 more potentially affected by CVE-2024-34391 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2024-34391 Source advisory: OSV:GHSA-6433-X5P4-8JC7...

@arb-protocol/core (>=2.0.0-alpha.1, <=2.0.0-alpha.5), @arb-protocol/jupiter-adapter (>=2.0.0-alpha.5, <=2.0.0-alpha.6) +80 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.31.0)

@solana/web3.js NPM version 1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @arb-protocol/core =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =2.20.0-rc.38, =1.0.1-rc.0, =0.0.1, =0.0.1, =1.0.0, =0.2.0,...

@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @alexop/express-mysql-session (2.2.0) +141 more potentially affected by CVE-2024-21509 via mysql2 (>=3.0.0, <=3.9.3)

mysql2 NPM version =3.0.0, =15.0.0, =1.0.6-beta.0, =1.0.0, =15.0.0-alpha.2, =0.1.0, =0.1.0, =0.1.0, =1.0.75, =4.38.0, =4.0.1-alpha, =0.20.0, =0.52.0, =1.6.0, =2.9.24-alpha.2, =2.23.12 and more Source cves: CVE-2024-21509 Source advisory: SNYK:JS-MYSQL2-6591084...

@ai-lighthouse/cli (>=1.0.1, <=1.0.3), @ccnoname/kk-log (>=1.0.0, <=1.0.2) +58 more potentially affected by CVE-2023-44402 via electron (>=23.0.0, <=23.3.13)

electron NPM version =23.0.0, =1.0.1, =1.0.0, =1.0.15, =0.49.0, =0.0.1, =0.0.5, =0.30.0, =1.0.0-beta.1, =2.4.1, =0.0.2, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =0.0.0-next-1d0257ec5ae772888fbfb677bbacf8cd7dfb3127, =0.3.3, =0.0.0-next-084f1c20551b15b25b3945fae7547f5321bc4128, =1.1.2...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

CVE-2022-0357

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to...

Path traversal

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to...

CVE-2022-0357 Improper Quoting Path Issue in Bitdefender Total Security

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to...

CVE-2022-0357: Unquoted Search Path or Element

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to...

Ultimate FAQ Plugin for WordPress < 1.8.25 Multiple Vulnerabilities

The WordPress Ultimate FAQ Plugin installed on the remote host is affected by multiple vulnerabilities :\n\n - An Arbitrary Options Import.\n - An HTML Injection.\n Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number...

SUSE SLED15: WebKit2GTK-4.0-lang / WebKit2GTK-4.1-lang / WebKit2GTK-5.0-lang / etc (SUSE-SU-2022:4207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4207-1 advisory. Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafte...

Apple iOS < 16.0.3 Vulnerability (HT213480)

Binary data appleios1603check.nbin...

How to Perform a Free Ubuntu Vulnerability Scan with OpenSCAP and Canonical’s Official OVAL Content

Hello everyone! Five years ago I wrote a blogpost about OpenSCAP. But it was only about the SCAP Workbench GUI application and how to use it to detect security misconfigurations. Alternative video link for Russia: This time, I will install the OpenSCAP command line tool on Ubuntu and use it to...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +83 more potentially affected by CVE-2022-24441 +1 more via snyk (>=1.1.1, <=1.954.0)

snyk NPM version =1.1.1, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2022-24441, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3111871...

Five Steps to Integrating a Data Repository Vulnerability Assessment Into A WAF–Driven Vulnerability Management Program

A vulnerability assessment is a systematic review of security weaknesses in an information system. It evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed. There are...

Nutanix AHV : (NXSA-AHV-20201105.30007)

The version of AHV installed on the remote host is prior to 20201105.30007. It is, therefore, affected by a vulnerability as referenced in the NXSA-AHV-20201105.30007 advisory. - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 -...

System Restart Required

Using the supplied credentials, Nessus was able to determine that the remote system has updates applied that require a reboot to take effect. Nessus has determined that the system has not been rebooted since these updates have been applied, and thus should be rebooted. TRUSTED...

Command Execution Vulnerability in Netnifty Vulnerability Scanning System

Beijing Netnifty Information Technology Co., Ltd. covers network border security protection, application and data security protection, network security risk management, professional security solutions and professional security services. A command execution vulnerability exists in the Netnifty...

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1041 more potentially affected by CVE-2019-19935 via froala-editor (>=3.0.0, <=3.2.2)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...

Pwndora - Massive IPv4 Scanner, Find And Analyze Internet-Connected Devices In Minutes, Create Your Own IoT Search Engine At Home

Pwndora is a massive and fast IPv4 address range scanner, integrated with multi-threading. Using sockets, it analyzes which ports are open, and collects more information about targets, each result is stored in Elasticsearch. You can integrate with Kibana to be able to visualize and manipulate dat...